Skip to content
Sign in
4.2 Medium

CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…

Description

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled

Affected products and versions

Product Affected versions Fixed in
GitLab EE 14.0 14.0 → < 14.0.2 14.0.2
GitLab EE 13.12 13.12 → < 13.12.6 13.12.6
GitLab EE 13.7 13.7 → < 13.11.6 13.11.6

Other CVEs of GitLab EE

The 10 CVEs of GitLab EE →
CVE-2020-26412 Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics… 3.1 Low CVE-2020-26416 Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms… 4.0 Medium CVE-2020-13349 An issue has been discovered in GitLab EE affecting all versions starting from 8.12 4.3 Medium CVE-2020-13348 An issue has been discovered in GitLab EE affecting all versions starting from 10.2 5.7 Medium
Track this CVE